Timeline for bcrypt: random salt vs computed salt
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 25, 2012 at 18:12 | vote | accept | Marc | ||
| Sep 25, 2012 at 18:12 | comment | added | Marc | Thanks, that answer actually made sense :). The fact that the algorithm used to calculate the salts can not be changed once it's in use is indeed a problem. If the hacker, one way or the another, obtained the algorithm used to compute the salts, then even changing the passwords won't change the salt for a user. I'll mark this as the best answer. | |
| Sep 25, 2012 at 16:28 | history | answered | Thomas Pornin | CC BY-SA 3.0 |